This vulnerability involves a privilege misconfiguration in the Secure Access installer for Windows client and server versions before 14.55. When Secure Access is installed in a non-default directory, local attackers can exploit this misconfiguration to escalate their privileges to Administrator level. The CVSS 4.0 vector indicates local attack vector, low attack complexity, no user interaction, and high impact on confidentiality, integrity, and availability. No official patch or remediation level has been provided by the vendor as of the publication date.

An attacker with local access to the affected system can elevate their privileges to Administrator, potentially gaining full control over the Secure Access client or server. This could lead to unauthorized system modifications, data compromise, or disruption of services. The vulnerability is specifically triggered when the software is installed in a non-default location.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid installing Secure Access in non-default locations and restrict local access to trusted users only.